Some option is wrong.

[inkfish]

Hello,

I just had to reinstall windows and everything i had on my computer. Before i had a working PHP, Apache and mysql system and now i've reinstalled all of it. When I test my website again the login script isn't working.

If i enter wrong username and password i get redirected to index.php and thats good, but when i enter the right username and password Internet Explorer says it can't find some page and the page that it's supposed to find is admin.php, but the code isn't wrong because it worked before.

the login.php:

<?php

include("../inc/connect.php");

if (isset($user) && isset($pass)) {
	$query = "SELECT id, username FROM mc_users WHERE username='$user' AND password=PASSWORD('$pass')";
	$res = mysql_query($query) or die ("Kan inte läsa från databasen!");
	$row = mysql_fetch_array($res);

if (isset($row['id'])) {
session_start();
  $uid = $row['id'];
  $uname = $row['username'];
  session_register("uid", "uname");

	// Om allt går rätt skickas man till administrations sidorna.
	Header("Location: admin.php");   
}
else {
	Header("Location: ../index.php");
}
}
else {
	Header("Location: ../index.php");
}
?>

the admin.php is in the same folder as the login.php and the index.php is in one folder lower.

I wounder if it can be that i installed apache 2 now and before i had 1.something.?

Thanks for help!

[Justin_Reel]

Do you have register_globals on? The newer versions of php have this OFF by default...

[inkfish]

register_globals = On

no, isn't that.....it's something else...

I wounder if its something that has to do with sessions...because it only apears when i enter a valid username and password. the url in IE still stands on http://localhost/mc/admin/login.php when the "the page can't be found" apears.... I don't know if that helps you people in figuring out what it can be?

I've downloaded and installed Apache 1.X.X now too but that didn't help =/

Thanks!

[inkfish]

Okey, i think it has to be something about the sessions. because in the admin.php file i have this in the beginning:

/ Making sure you are logged in. /
session_start();
if (!isset($uid) || !isset($uname)) {
Header("Location: index.php");
}

And if i remove it, the login.php redirected me to admin.php.

i have setthe session_path to a folder and when i look at it after i've run the site there is a session file in it looking like this:

uid|s:1:"1";uname|s:8:"Lundberg";

So, figuring anything out? It should be something that has to do with sessions i think...?

[Justin_Reel]

I'm not sure if you can call session information by just $uid with register_globals on or not (and I don't have a machine here that I can test it on right now). I always write my scripts with it off. Give this a try:

if (!isset($SESSION['uid']) || !isset($SESSION['uname'])) {

[inkfish]

Okey, i've changed the code to this:

/* Making sure you are logged in. */
	session_start();
	if ((!isset($_SESSION['uid']) || !isset($_SESSION['uname'])) { <--- line 7.
		Header("Location: index.php");
	}

and now this apears: Parse error: parse error, unexpected '{' in e:\webdesign\mc\admin\admin.php on line 7

If i remove the first ( after the if on line 7 the same problem as before apears, "Can't find the page".

[bernouli]

well, try this

<?php



include("../inc/connect.php");



if (isset($user) && isset($pass)) {

$query = "SELECT id, username FROM mc_users WHERE username='$user' AND password=PASSWORD('$pass')";

$res = mysql_query($query) or die ("Kan inte läsa från databasen!");

$row = mysql_fetch_array($res);



if (isset($row['id'])) {

   session_start();

  $uid = $row['id'];

  $uname = $row['username'];

  session_register("uid", "uname");



    // Om allt går rätt skickas man till administrations sidorna.

    Header("Location: ../admin.php");   

}

else {

    Header("Location: ../index.php");

}

}

else {

Header("Location: ../index.php");

}

?>

[xblue]

total count of ( in that line: 4
total count of ) in that line: 3

Now, this mismatch is fairly obvious, I think?

With your redirection problem, your redirection from admin.php to index.php seems to be wrong, since you stated they are not in the same folder before.

[inkfish]

xblue: you were right, now im redirected to index.php even if I enter a valid username and password, its something else that is wrong =/

[inkfish]

If i added Location : admin.php?".SID

it worked, but then a big number is added in the url...and i have to use ?".sid on every link.

Isn't there a simpler way?

the code i have at the top of admin.php is:

<? 
	include("../inc/connect.php");
	include("../inc/functions.php");

/* Making sure you are logged in. */
session_start();
if (!isset($_SESSION['uid']) || !isset($_SESSION['uname'])) {
	Header("Location: ../index.php");
}
?>

Thanks!

[Major_Tom]

I'm having the same problem... When I test on my WS here at work (Win2000/IIS5) I get the same error, and I can work around it by adding the sessionid to the URL as you figured out above.

The strange thing is that it's working perfectly well on my home WS (Win2000/Omnihttpd) and one of my private hosts (Linux/Apache) 😕

[xblue]

Did you compare the session settings in the different php.ini files?

I could imagine that you either disallow the use of cookies alltogether (so you would have to pass the session id in the url when redirecting), or it may be due to the session.cookie_path.

No other ideas yet.
Best luck!

[inkfish]

It has to be some option that is set wrong....or maybe that we are using a newer version of PHP...or something, i dont know.

[Major_Tom]

Originally posted by xblue
Did you compare the session settings in the different php.ini files?

I could imagine that you either disallow the use of cookies alltogether (so you would have to pass the session id in the url when redirecting), or it may be due to the session.cookie_path.

No other ideas yet.
Best luck!

I have:

; Lifetime in seconds of cookie or, if 0, until browser is restarted.
session.cookie_lifetime = 0

; The path for which the cookie is valid.
session.cookie_path = /

; The domain for which the cookie is valid.
session.cookie_domain = /

Shouldn't that work 😕

[Major_Tom]

Originally posted by inkfish
It has to be some option that is set wrong....or maybe that we are using a newer version of PHP...or something, i dont know.

I have the same PHP version (4.2.3) on all of the servers I have tested, working and non-working, so that's not the problem.

To me it seems IIS has a problem with this? 😕